CVE-2023-26107

Published March 6th, 2023

View on NVD ↗

CVSS v3

6.9

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.

eBay/SketchSVG

Have icons in a Sketch file but don't want to manually extract and compress them as SVGs? Let our SketchSVG tool do it!

GitHub